PHP PHP 7.2 Cryptography

Jimmy · Feb 12, 2017

PHP 7.2 will be the first programming language to accept modern cryptography into its standard library.

Scott Arciszewski on Twitter

php.internals: [RFC][Vote] Libsodium vote closes; accepted (37-0)

eva2000 · Feb 12, 2017

nice thanks for the heads up

believe it's related to PHP: rfc:libsodium replacing libmcrypt ?

Introduction
As we move towards PHP 7.0.0, we must look at the current state of cryptography in PHP. Libmcrypt hasn't been touched in eight years (last release was in 2007), leaving openssl as the only viable option for PHP 5.x and 7.0 users.

Meanwhile, libsodium bindings have been available in PECL for a while now, and has reached stability.

Libsodium is a modern cryptography library that offers authenticated encryption, high-speed elliptic curve cryptography, and much more. Unlike other cryptography standards (which are a potluck of cryptography primitives; i.e. WebCrypto), libsodium is comprised of carefully selected algorithms implemented by security experts to avoid side-channel vulnerabilities.

I maintain the documentation for the PHP extension here.
Click to expand...

Jimmy · Feb 12, 2017

I think so. I just caught the tweet on twitter. Figured I'd post it.

eva2000 · Feb 12, 2017

current libsodium php extension implementation https://paragonie.com/book/pecl-libsodium and PECL :: Package :: libsodium

https://paragonie.com/book/pecl-libsodium/read/00-intro.md

Introduction to Libsodium Development in PHP
This e-book is intended for PHP developers with no prior cryptography experience. To that end, we will not go too in-depth to the nature of the lower-level cryptography features that each libsodium feature uses.

Towards the end of each chapter, we will link to other resources that explain the finer details for readers that are interested.

Let's jump right in, shall we?

What is Libsodium?

(Copied from the Official Libsodium Documentation.)

The Sodium crypto library (libsodium) is a modern, easy-to-use software library for encryption, decryption, signatures, password hashing and more.

It is a portable, cross-compilable, installable, packageable fork of NaCl, with a compatible API, and an extended API to improve usability even further.

Its goal is to provide all of the core operations needed to build higher-level cryptographic tools.

Sodium supports a variety of compilers and operating systems, including Windows (with MinGW or Visual Studio, x86 and x64), iOS and Android.

The design choices emphasize security, and "magic constants" have clear rationales.

And despite the emphasis on high security, primitives are faster across-the-board than most implementations of the NIST standards.

Version 1.0.10 was released on April 4, 2016.

What is PECL Libsodium?
PECL Libsodium refers to the PHP extension available as a PECL package that exposes the libsodium API for PHP developers.

There are two important things to keep in mind here:

The PECL package doesn't work unless you install libsodium. You need both.

Just because libsodium has a feature doesn't mean it's available (or intended) for use by PHP developers

Click to expand...

eva2000 · Feb 12, 2017

Also

GitHub - jedisct1/libsodium: A modern and easy-to-use crypto library.

GitHub - jedisct1/libsodium-php: PHP extension for libsodium

eva2000 · Feb 12, 2017

Installing current implementation of libsodium php extension PECL :: Package :: libsodium involves

Code (Text):

yum list libsodium libsodium-devel --disableplugin=priorities -q | tr -s ''
Available Packages
libsodium.x86_64                           1.0.5-1.el7                      epel
libsodium-devel.x86_64                     1.0.5-1.el7                      epel

Code (Text):

yum -y install libsodium libsodium-devel

Code (Text):

pecl install libsodium
echo "extension=libsodium.so" > /etc/centminmod/php.d/libsodium.ini
nprestart

Looks like yum EPEL repo's libsodium is dated 1.0.5 while 1.0.11 is newest Releases · jedisct1/libsodium · GitHub

Code (Text):

php --ri libsodium

libsodium

libsodium support => enabled
libsodium compiled version => 1.0.6
libsodium headers version => 1.0.5
libsodium library version => 1.0.5

Code (Text):

php --ini
Configuration File (php.ini) Path: /usr/local/lib
Loaded Configuration File:         /usr/local/lib/php.ini
Scan for additional .ini files in: /etc/centminmod/php.d
Additional .ini files parsed:      /etc/centminmod/php.d/a_customphp.ini,
/etc/centminmod/php.d/curlcainfo.ini,
/etc/centminmod/php.d/ffmpeg.ini,
/etc/centminmod/php.d/geoip.ini,
/etc/centminmod/php.d/igbinary.ini,
/etc/centminmod/php.d/imagick.ini,
/etc/centminmod/php.d/libsodium.ini,
/etc/centminmod/php.d/mailparse.ini,
/etc/centminmod/php.d/memcache.ini,
/etc/centminmod/php.d/memcached.ini,
/etc/centminmod/php.d/redis.ini,
/etc/centminmod/php.d/zendopcache.ini,
/etc/centminmod/php.d/zzendopcache.ini

Code (Text):

php -v
PHP 7.1.1 (cli) (built: Feb  4 2017 10:32:11) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.1.0, Copyright (c) 1998-2017 Zend Technologies
    with Zend OPcache v7.1.1, Copyright (c) 1999-2017, by Zend Technologies

Code (Text):

php -m
[PHP Modules]
bcmath
bz2
calendar
Core
ctype
curl
date
dom
enchant
exif
filter
ftp
gd
geoip
gettext
gmp
hash
iconv
igbinary
imagick
imap
intl
json
ldap
libsodium
libxml
mailparse
mbstring
mcrypt
memcache
memcached
mysqli
mysqlnd
openssl
pcntl
pcre
PDO
pdo_mysql
pdo_sqlite
Phar
posix
pspell
readline
redis
Reflection
session
shmop
SimpleXML
snmp
soap
sockets
SPL
sqlite3
standard
sysvmsg
sysvsem
sysvshm
tidy
tokenizer
xml
xmlreader
xmlrpc
xmlwriter
xsl
Zend OPcache
zip
zlib

[Zend Modules]
Zend OPcache

Log in / Register

Forums

Want more timely Centmin Mod News Updates?

PHP PHP 7.2 Cryptography

Jimmy Well-Known Member

eva2000 Administrator Staff Member

Jimmy Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want more timely Centmin Mod News Updates?

PHP PHP 7.2 Cryptography

Jimmy Well-Known Member

eva2000 Administrator Staff Member

Jimmy Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.